{"id":55251,"date":"2020-01-16T00:00:00","date_gmt":"2020-01-15T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/fajlovye-razresheniya-v-linux"},"modified":"2020-02-18T14:03:21","modified_gmt":"2020-02-18T11:03:21","slug":"fajlovye-razresheniya-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","title":{"rendered":"Datote\u010dna dovoljenja v Linuxu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>Pozdravljeni vsi. Aktivno se vklju\u010dujemo v delo in \u017ee januarja pripravljamo veliko mo\u010dnih lansiranj. Med drugim je razpisan nov cikel priljubljenega te\u010daja <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">\"Administrator Linuxa\"<\/a><\/noindex>. V pri\u010dakovanju lansiranja tradicionalno delimo prevod koristnega gradiva.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"Datote\u010dna dovoljenja v Linuxu\" src=\"\/wp-content\/uploads\/2020\/01\/451acace5e0a9088355acb800d789db9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<blockquote><p><i>Datote\u010dne pravice ponujajo varno alternativo izvr\u0161nim datotekam SUID, vendar so lahko na prvi pogled nekoliko zmedene.<\/i><\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nVsi vemo, da so binarne datoteke <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">SUID<\/a><\/noindex> so <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Setuid#Security\">slaba re\u0161itev z vidika varnosti<\/a><\/noindex>. Na sre\u010do, \u010de va\u0161e aplikacije potrebujejo nekatere omejene privilegije, obstaja u\u010dinkovitej\u0161i na\u010din, imenovan <noindex><a rel=\"nofollow\" href=\"http:\/\/www.linuxjournal.com\/article\/5737\">datote\u010dne pravice<\/a><\/noindex>.<\/p>\n<p>Prihranil bom va\u0161 \u010das, \u010de \u017eelite presko\u010diti podrobno branje zgornjega \u010dlanka: v bistvu datote\u010dne pravice omogo\u010dajo procesom, ki se izvajajo v imenu uporabnika root, in so torej poobla\u0161\u010deni za izvajanje, da ohranijo dolo\u010dene zmogljivosti, omejene <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">s tem seznamom<\/a><\/noindex>, ko opustijo privilegije in se izvajajo kot neprivilegirani uporabnik. To pomeni, da \u010de zlonamerni uporabnik uspe s kompromitiranjem procesa preko napake v pomnilniku ali drugega izvoza, ne more izkoristiti ni\u010desar drugega kot dolo\u010dene minimalne privilegije, ki jih proces dejansko potrebuje.<\/p>\n<p>Pravice so odli\u010dne za storitve, ki se obi\u010dajno vedno izvajajo v imenu uporabnika root, toda kaj pa ukazne vrstice? Na sre\u010do, to tudi podpira, pod pogojem, da imate name\u0161\u010dena prava orodja. \u010ce uporabljate Ubuntu, boste na primer potrebovali paket <code>libcap2-bin<\/code>. Prav tako boste morali uporabljati sodobno jedro (od razli\u010dice<b> 2.6.24<\/b>).<\/p>\n<p>. Te funkcije omogo\u010dajo povezovanje pravic z izvr\u0161nimi datotekami podobno, kot je nastavitev SUID bita, vendar le za dolo\u010den sklop pravic. Orodje <code>setcap<\/code> se uporablja za dodajanje in odstranjevanje pravic iz datoteke.<\/p>\n<p>Prvi korak je izbrati ustrezne pravice. Za ta \u010dlen predvidevam, da obstaja orodje za diagnosticiranje omre\u017eja, imenovano <code>tracewalk<\/code>, ki bi moralo biti sposobno obravnavati <noindex><a rel=\"nofollow\" href=\"http:\/\/man7.org\/linux\/man-pages\/man7\/raw.7.html\">neobdelane vti\u010dnice<\/a><\/noindex>. Obi\u010dajno je za to potrebno, da se aplikacija izvaja v imenu uporabnika root, vendar ob pregledu <noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">spiska <\/a><\/noindex>se ugotovi, da so potrebne le pravice <code>CAP_NET_RAW<\/code>.<\/p>\n<p>Pod pretpostavkom da se nalazite u direktoriju gdje je izvr\u0161na datoteka <code>tracewalk<\/code>, mo\u017eete dodati ovo dopu\u0161tenje na sljede\u0107i na\u010din:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\nZa sada zanemarite sufiks <code>=eip<\/code> za dopu\u0161tenje, o tome \u0107u vam re\u0107i za nekoliko sekundi. Imajte na umu da je naziv dopu\u0161tenja napisan malim slovima. Sada mo\u017eete provjeriti jeste li ispravno postavili dopu\u0161tenja pomo\u0107u:<\/p>\n<pre><code class=\"bash\">setcap -v cap_new_raw=eip tracewalk<\/code><\/pre>\n<p>\nIli mo\u017eete ispisati popis svih dopu\u0161tenja postavljenih za ovu izvr\u0161nu datoteku:<\/p>\n<pre><code class=\"bash\">getcap tracewalk\n<\/code><\/pre>\n<p>\nZa informaciju, tako\u0111er mo\u017eete ukloniti sva dopu\u0161tenja iz izvr\u0161ne datoteke koriste\u0107i:<\/p>\n<pre><code class=\"bash\">setcap -r tracewalk<\/code><\/pre>\n<p>\nU ovoj fazi trebali biste biti u mogu\u0107nosti pokrenuti izvr\u0161nu datoteku kao neprivilegirani korisnik, a ona bi trebala imati mogu\u0107nost rada s sirovim soketima, ali ne bi trebala imati nikakve druge privilegije koje ima root korisnik.<\/p>\n<p>Dakle, \u0161to zna\u010di ovaj \u010dudni sufiks <code>=eip<\/code>? \u0417\u0434\u0435\u0441\u044c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u0438\u043a\u0430 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u041a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u043c\u0435\u0435\u0442 \u0442\u0440\u0438 \u043d\u0430\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u2014 <i>efektivna, nasljedna i dopu\u0161tena (effective, inheritable i permitted)<\/i>:<\/p>\n<ul>\n<li><b>Efektivna (Effective)<\/b> dopu\u0161tenja su ona koja odre\u0111uju \u0161to proces zapravo mo\u017ee raditi. Na primjer, ne mo\u017ee se baviti sirovim soketima ako <code>CAP_NET_RAW<\/code> nije u efektivnom skupu.<\/li>\n<li><b>Dopu\u0161tena (Permitted)<\/b> dopu\u0161tenja su ona koja procesu smijete imati, ako ih zatra\u017ei odgovaraju\u0107im pozivom. Ona ne dopu\u0161taju procesu da zapravo ne\u0161to radi, osim ako nije posebno napisano za zahtijevanje odre\u0111enog dopu\u0161tenja. Ovo omogu\u0107ava pisanje procesa za dodavanje posebno va\u017enih dopu\u0161tenja u efektivni skup samo u trenutku kada su stvarno potrebna.<\/li>\n<li><b>Nasljedna (Inheritable)<\/b> dopu\u0161tenja su ona koja se mogu naslijediti u dostupnom skupu potomkog procesa. Tijekom operacije <code>fork()<\/code> ili <code>clone()<\/code> potomku uvijek se dodjeljuje kopija dopu\u0161tenja roditeljskog procesa, budu\u0107i da u tom trenutku jo\u0161 uvijek izvr\u0161ava istu izvr\u0161nu datoteku. Nasljedni set se koristi kada <code>exec()<\/code> (ili ekvivalent) poziva za zamjenu izvr\u0161ne datoteke drugom. U ovoj fazi, dostupni set procesa maskira nasljedni skup kako bi se dobio dostupni skup koji \u0107e se koristiti za novi proces.<\/li>\n<\/ul>\n<p>\nTako da, alat <code>setcap<\/code> omogo\u010da, da za to izvr\u0161no datoteko samostojno dodajamo dovoljenja teh treh sklopov. Upo\u0161tevajte, da se vrednost skupin za dostop do datotek interpretira rahlo druga\u010de:<\/p>\n<ul>\n<li><b>Dostopni <\/b>dovoljenja datotek so tista, ki so vedno na voljo za izvr\u0161no datoteko, tudi \u010de nadrejeni proces, ki jo je poklical, tega nima. Pred tem so jih imenovali 'prisilna' dovoljenja.<\/li>\n<li><b>Dedovana <\/b>dovoljenja datotek dolo\u010dajo dodatno masko, ki se lahko uporabi tudi za odstranitev dovoljenj iz skupa klicajo\u010dega procesa. Uporabljajo se poleg dedovanega sklopa klicajo\u010dega procesa, zato se dovoljenje deduje le, \u010de obstaja v obeh sklopih.<\/li>\n<li><b>U\u010dinkovita <\/b>dovoljenja datotek so v resnici le en bit, ne pa sklop, in \u010de je nastavljen, to pomeni, da se celoten dostopen sklop prav tako kopira v u\u010dinkovit sklop novega procesa. To se lahko uporabi za dodajanje dovoljenj procesom, ki niso bila posebej napisana, da jih zahtevajo. Ker je to en bit, \u010de ga nastavite na katero koli dovoljenje, mora biti nastavljen za vsa dovoljenja. Lahko ga obravnavate kot dedni bit, saj se uporablja za omogo\u010danje uporabe dovoljenj za aplikacije, ki jih ne podpirajo.<\/li>\n<\/ul>\n<p>\nKo nastavite dovoljenja preko <code>setcap<\/code> treh \u010drk <code>e<\/code>, <code>i<\/code> in <code>p<\/code> se nana\u0161ajo na <i>u\u010dinkovito, dedovano in dostopno<\/i> sklopi, zato prej\u0161nja specifikacija:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n\u2026 navaja, da je treba dovoljenje <code>CAP_NET_RAW<\/code> dodati dostopnim in dedovanim sklopom ter da mora biti nastavljen tudi u\u010dinkovit bit. To bo nadomestilo vsa prej nastavljena dovoljenja v datoteki. Za hkratno nastavitev ve\u010d dovoljenj uporabite seznam lo\u010den z vejico:<\/p>\n<pre><code class=\"bash\">sudo setcap cap_net_admin,cap_net_raw=eip tracewalk<\/code><\/pre>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/www.kernel.org\/doc\/man-pages\/online\/pages\/man7\/capabilities.7.html\">Priro\u010dnik za dovoljenja<\/a><\/noindex> podrobneje obravnava vse to, vendar upam, da je ta objava nekoliko razjasnila, kaj se dogaja. \u0160e nekaj opozoril in trikov je vredno omeniti.<\/p>\n<p>Prvi\u010d, datote\u010dne sposobnosti ne delujejo s simbolnimi povezavami \u2014 morali jih boste uporabiti na sami izvr\u0161ni datoteki (tj. na cilju simbolne povezave).<\/p>\n<p>Poleg tega ne delujejo z interpretiranimi skripti. Na primer, \u010de imate skript Python, kateremu \u017eelite dodeliti privilegije, ga morate dodeliti samemu interpreterju Python. O\u010ditno je, da je to potencialen varnostni problem, saj bodo vsi skripti, ki se izvajajo s tem interpreterjem, imeli dodeljene privilegije, \u010deprav je to \u0161e vedno bistveno bolj\u0161a mo\u017enost kot SUID. Najbolj pogosta re\u0161itev je o\u010ditno napisati lo\u010deno izvajalno datoteko v C-ju ali analogu, ki lahko izvaja potrebne operacije in ga pokli\u010de iz skripta. To je podobno pristopu, ki ga uporablja Wireshark, ki uporablja binarno datoteko. <code>\/usr\/bin\/dumpcap<\/code> za izvajanje privilegiranih operacij:<\/p>\n<pre><code class=\"bash\">$ getcap \/usr\/bin\/dumpcap \n\/usr\/bin\/dumpcap = cap_net_admin,cap_net_raw+eip<\/code><\/pre>\n<p>\nPoleg tega se datote\u010dne pravice onemogo\u010dijo, \u010de uporabljate okoljsko spremenljivko <code>LD_LIBRARY_PATH<\/code> iz razumljivih varnostnih razlogov<i>(1)<\/i>. Enako velja tudi za <code>LD_PRELOAD<\/code>, kolikor vem.<\/p>\n<p><i>1. Ker lahko napadalec o\u010ditno nadomesti eno od standardnih knji\u017enic in uporabi <code>LD_LIBRARY_PATH<\/code>, da prisili svojo knji\u017enico, da se pokli\u010de pred sistemsko, in tako ima lastno poljubno kodo, ki se izvaja s tak\u0161nimi privilegiji kot klicna aplikacija. <br \/>\n<\/i><\/p>\n<p><i><b>S tem je vse. O programu te\u010daja se boste lahko podrobneje seznanili na <noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/rbVT\/\">webinarju, ki bo potekal 24. januarja.<\/a><\/noindex><\/b><\/i><br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/483934\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u0432\u0441\u0435\u043c \u043a\u0443\u0440\u0441\u0430 \u00ab\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 Linux\u00bb. \u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0434\u0435\u043b\u0438\u043c\u0441\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430. \u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c SUID, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434. \u0412\u0441\u0435 \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":55252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-15T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:21+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Datote\u010dne pravice v Linuxu | ProHoster","description":"\u017divjo vsi. Aktivno se vklju\u010dujemo v delo in \u017ee v januarju pripravljamo veliko mo\u010dnih lansiranj.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 Linux | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442. \u041c\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0435\u043c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438 \u0443\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0433\u043e\u0442\u043e\u0432\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0449\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/fajlovye-razresheniya-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-15T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:47:37","updated":"2022-09-30 13:42:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/55251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=55251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/55251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/55252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=55251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=55251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=55251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}